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This listing of claims will replace all prior versions, and listings, of claims in the application. 
Listing of Claims: 

1 . (Currently Amended) An object model document comprising: 
for persisting an object model therein, the document comprising 

a compiled executable file for persisting an object model, the file having: 

an image source from which the persisted object model is 
instantiated in a memory of a computer; 

a security source from which a security agent is instantiated in the 
memory of the computer; the security agent for controlling access to the object model as 
instantiated in the memory of the computer; and 

a loader for being instantiated in the memory of the computer upon a 
command from a commander to execute the executable file to instantiate the persisted 
object model, the loader for instantiating the object model in the memory from the image 
source, instantiating the security agent in the memory from the security source, and 
returning to the commander a first reference to the instantiated security agent, whereby the 
commander in employing the first reference accesses the security agent rather than the 
instantiated object model. 

2. (Original) The document of claim 1 wherein the executable file is 
compiled by a compiler from a C-type programming language object model 
document. 

3 . (Original) The document of claim 1 wherein the loader upon 
instantiating the security agent provides same with a second reference to the 
instantiated object model, whereby the commander does not have the second reference 
and therefore cannot directly access the object model or command same to act. 

4. (Original) The document of claim 1 wherein the instantiated security 
agent passes on each command from the commander to the object model unless 
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such security agent deems such command to be of a type that should not be so passed on. 

5. (Original) The document of claim 4 wherein the security agent does 
not pass on to the object model a type of command that would expose the object model in a 
non-obfuscated form. 



6. (Original) The document of claim 4 wherein the security agent 
does not pass on to the object model a type of command that would expose the object model 
with a level of granularity finer than a pre-defined maximum. 



7. (Original) The document of claim 6 wherein the security agent passes 
on to the object model a substitute command that exposes the object model with a level of 
granularity coarser than the pre-defined maximum. 



8. (Original) The document of claim 1 wherein the loader 
instantiates the security agent separately from the object model. 

9. (Original) The document of claim 1 wherein the loader instantiates 
the security agent as part of the object model. 



10. (Currently Amended) A method for loading a persisted object model 
from an object model document, comprising, a compiled executable file having an image 
source, a security source, and a loader, the method comprising: 

providing a compiled executable file having an image source, a 
security source, and a loader; 

instantiating the loader in a memory of a computer upon a 
command from a commander to execute the executable file to instantiate the persisted 
object model; 
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the loader instantiating the object model in the memory from the 

image source; 

the loader instantiating a security agent in the memory from 
the security source, the security agent for controlling access to the object model 
as instantiated in the memory of the computer; and 

the loader returning to the commander a first reference to the 
instantiated security agent, whereby the commander in employing the first reference 
accesses the security agent rather than the instantiated object model. 



1 1 . (Original) The method of claim 10 further comprising the loader 
upon instantiating the security agent providing same with a second reference to the 
instantiated object model, whereby the commander does not have the second reference 
and therefore cannot directly access the object model or command same to act. 



12. (Original) The method of claim 10 further comprising the 
instantiated security agent passing on each command from the commander to the object 
model unless such security agent deems such command to be of a type that should not be 
so passed on. 

13. (Original) The method of claim 12 comprising the security agent 
not passing on to the object model a type of command that would expose the object model 
in a non-obfuscated form. 



14. (Original) The method of claim 12 comprising the security agent 
not passing on to the object model a type of command that would expose the object model 
with a level of granularity finer than a pre-defined maximum. 



15. (Original) The method of claim 14 comprising the security agent 
passing on to the object model a substitute command that exposes the object model with a 
level of granularity coarser than the pre-defined maximum. 



Page 4 of 13 



DOCKET NO.: MSFT-2555/304784.01 
Application No.: 10/656,384 
Office Action Dated: April 1 8, 2007 



PATENT 

REPLY FILED UNDER EXPEDITED 
PROCEDURE PURSUANT TO 

37 CFR§ 1.116 



16. (Original) The method of claim 10 comprising the loader 
instantiating the security agent as part of the object model. 

17. (Original) The method of claim 10 comprising the loader 
instantiating the security agent as part of the object model. 

18. (Currently Amended) A computer-readable storage medium having 
stored thereon instructions, which when executed, instantiate a loader for an object model 
document for persisting an object model therein and enable a commander to indirectly 
access the object model , the object model document comprising a compiled executable file 
having an image source file, a security source, and a loader, the instructions comprising : 

an the image source from which the persisted object model is 
instantiated in a memory of a computer; 

a the security source from which a security agent is instantiated in the 
memory of the computer; the security agent for controlling access to the object model as 
instantiated in the memory of the computer; and 

a the loade r, which instantiates the executable file for being 
instantiated in the memory of the computer upon a command from a commander i 4e 
execute the executable file to instantiate the persisted object model, the loader for 
instantiating the object model in the memory from the image source, the loader 
instantiating the security agent in the memory from the security source, wherein the 
instructions return and returning to the commander a first reference to the instantiated 
security agent, whereby the commander in employing the first reference accesses the 
security agent rather than the instantiated object model. 

19. (Original) The medium of claim 18 wherein the executable file is 
compiled by a compiler from a C-type programming language object model 

document. 



20. (Original) The medium of claim 18 wherein the loader upon 
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instantiating the security agent provides same with a second reference to the instantiated 
object model, whereby the commander does not have the second reference and therefore 
cannot directly access the object model or command same to act. 

21. (Original) The medium of claim 18 wherein the instantiated 
security agent passes on each command from the commander to the object model 
unless such security such security agent deems such command to be of a type that 
should not be so passed on. 



22. (Original) The medium of claim 21 wherein the security agent 
does not pass on to the object model a type of command that would expose the object 
model in a non-obfuscated form. 



23. (Original) The medium of claim 21 wherein the security agent 
does not pass on to the object model a type of command that would expose the object 
model with a level of granularity finer than a pre-defined maximum. 

24. (Original) The medium of claim 23 wherein the security agent 
passes on to the object model a substitute command that exposes the object model with a 
level of granularity coarser than the pre-defined maximum. 

25. (Original) The medium of claim 18 wherein the loader instantiates 
the security agent separately from the object model. 

26. (Original) The medium of claim 1 8 wherein the loader instantiates 
the security agent as part of the object model. 

27-33. (Cancelled) 
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